Privacy Policy

1. Information We Collect

1.1. Account Information

When you create an account we collect your email address for authentication. We use a passwordless verification-code flow and do not store passwords on our servers.

1.2. Payment Information

Subscriptions and one-time purchases are processed by LemonSqueezy, which acts as the Merchant of Record for all transactions. LemonSqueezy collects and processes your payment method, billing address, and tax information directly; we do not see, store, or have access to your full card or account details. We receive only limited transaction metadata from LemonSqueezy (customer email, subscription status, plan tier, invoice reference) needed to provision access to paid features. LemonSqueezy's own privacy policy applies to payment data: lemonsqueezy.com/privacy.

1.3. Usage Data Collected Automatically

When you use the browser extension or visit our website we automatically record a small set of technical events (installs; exports by format only, not content; feature clicks; in-product ratings; error reports) in our own database. We also log the IP address of API requests for rate-limiting and abuse prevention.

We may, at our discretion, integrate third-party analytics providers in the future. If we do, we will update this Privacy Policy and list them here before the change takes effect.

1.4. Communications

If you email us (for support, feedback, refund requests, or a Data Protection Agreement) we will receive your email address along with the contents of your message and any attachments you choose to send.

2. Conversation Data (Your Chat Content)

This section is intentionally separate because it is the most important privacy property of the product.

Local-only formats (Markdown, Text, CSV, JSON). Conversation parsing and file generation happen entirely inside your browser. Your chat content never leaves your device and is never transmitted to our servers.

Server-assisted formats (PDF, Image). Rendering these formats requires a headless browser that runs on our infrastructure. When you export to PDF or Image we transmit the conversation content to our server over HTTPS solely to produce the file. The generated file is delivered back to you and deleted from our storage automatically within one hour. We do not retain, index, analyze, profile, or use your conversation content for any purpose beyond producing the requested export, and we never share conversation content with third parties.

3. How We Use Information

We use the information described above to:

• provide, operate, and maintain the Services;
• authenticate you and manage your account;
• process transactions through LemonSqueezy and provision paid features;
• send verification codes and transactional emails (billing receipts, refund confirmations, account-related notices);
• track free-tier usage limits and enforce rate limits;
• diagnose bugs, monitor performance, and improve the product;
• detect and prevent fraud, abuse, and security incidents;
• comply with applicable law and respond to lawful requests.

We do not sell your personal information, and we do not use your data for behavioral advertising.

4. How We Share Information

4.1. Service providers. We share the minimum information needed with providers that operate parts of the Services on our behalf:

• LemonSqueezy (payment processing, Merchant of Record, tax remittance);
• our email delivery provider (for verification codes and transactional emails);
• our hosting and database providers (for operating the website and API).

4.2. Legal and safety. We may disclose information when we reasonably believe it is necessary to comply with a law, regulation, legal process, or governmental request; to enforce our Terms of Service; to detect, prevent, or address fraud, security, or technical issues; or to protect the rights, property, or safety of users or the public.

4.3. Business transfers. If Claude Chat Export is involved in a merger, acquisition, bankruptcy, or sale of assets, personal information may be transferred as part of that transaction. We will notify you via the Services or by email before your information becomes subject to a different privacy policy.

4.4. Aggregated or de-identified data. We may share aggregated or de-identified information that cannot reasonably be used to identify you.

4.5. With your consent. We may share information for any other purpose disclosed to you at the time and with your consent.

5. Legal Basis for Processing (GDPR)

If you are in the European Economic Area, the United Kingdom, or Switzerland, our legal basis for collecting and using your personal information depends on the context:

• Performance of a contract: when processing is necessary to deliver the Services you requested (for example, account creation, payment processing, running an export you initiated).
• Legitimate interests: when we rely on our legitimate interests in operating, securing, and improving the Services, and those interests are not overridden by your rights or freedoms (for example, basic usage analytics, fraud prevention, rate limiting).
• Consent: when you have given us specific consent (for example, opt-in to promotional emails).
• Legal obligation: when processing is required to comply with applicable law.

6. Data Security

We implement technical and organizational measures designed to protect your information: HTTPS encryption in transit, hashed verification codes, encrypted database connections, restricted server access, rate limiting, and regular security reviews. No method of transmission over the Internet or method of electronic storage is 100% secure, so we cannot guarantee absolute security.

7. Data Retention

• Account data (email, plan status): retained while your account is active, and deleted within 30 days of account deletion unless we are required to retain it for legal, tax, or accounting purposes.
• Usage events (exports, installs, error reports): retained for up to 180 days, then automatically purged.
• PDF / Image files generated on our servers: deleted within one hour of generation.
• Billing records held by LemonSqueezy: subject to LemonSqueezy's retention policy and applicable tax law (typically 7 years).
• Support emails: retained for up to 24 months for ongoing support and recordkeeping.

8. Your Rights

Depending on where you live you may have the right to:

• access the personal data we hold about you;
• request correction of inaccurate data;
• request deletion of your personal data ("right to be forgotten");
• request portability of your personal data;
• object to, or restrict, the processing of your personal data;
• withdraw consent where processing is based on consent;
• opt out of promotional communications;
• lodge a complaint with your local data protection authority.

To exercise any of these rights, email us at support@claudechatexport.com. We will respond within the timeframes required by applicable law. We may need to verify your identity before acting on your request.

If you have customers in the EU or otherwise need a Data Protection Agreement (DPA), please contact us at the same address for a copy of our standard DPA.

9. International Data Transfers

Claude Chat Export operates globally. Your information may be processed and stored in countries other than the one in which you are located, including countries outside the European Economic Area, the United Kingdom, and Switzerland whose data-protection laws may differ from those of your home country. When we transfer personal data internationally we rely on appropriate safeguards (such as Standard Contractual Clauses) and continue to protect it as described in this Privacy Policy.

10. Children

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

11. Cookies and Local Storage

We use browser local storage and strictly-necessary cookies only. These are used to keep you signed in, remember your theme preference, and maintain anonymous rate-limit counters. We do not use advertising, marketing, or third-party tracking cookies. Your browser lets you block or delete cookies at any time; doing so may prevent you from signing in or using some features of the Services.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes we will post the updated policy on this page and update the "Last updated" date above. If the change materially affects how we use previously collected personal data we will notify registered users by email.

13. Contact

Questions, requests, or complaints about this Privacy Policy can be sent to support@claudechatexport.com. The data controller of your personal information is Claude Chat Export.